liquidhorizon88-bot d95cf256e7 Security audit: suggest valid gateway.nodes.denyCommands entries (#29713) ...

Merged via squash.

Prepared head SHA: db23298f9806b8de8c4b3e816f1649c18ebc0c64
Co-authored-by: liquidhorizon88-bot <257047709+liquidhorizon88-bot@users.noreply.github.com>
Co-authored-by: grp06 <1573959+grp06@users.noreply.github.com>
Reviewed-by: @grp06

2026-03-03 15:47:57 -08:00

..

acp

fix(gateway+acp): thread stopReason through final event to ACP bridge (#24867)

2026-03-03 00:40:54 -05:00

agents

fix(security): strip partial API token from status labels (#33262)

2026-03-03 15:11:49 -08:00

auto-reply

Agent: unify bootstrap truncation warning handling (#32769)

2026-03-03 16:28:38 -05:00

browser

refactor(browser): dedupe playwright interaction helpers

2026-03-03 02:53:13 +00:00

canvas-host

refactor(tests): dedupe canvas host server setup

2026-03-03 02:53:13 +00:00

channels

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

cli

fix: drop discord opus dependency

2026-03-03 12:23:19 -06:00

commands

Agent: unify bootstrap truncation warning handling (#32769)

2026-03-03 16:28:38 -05:00

compat

…

config

Agent: unify bootstrap truncation warning handling (#32769)

2026-03-03 16:28:38 -05:00

cron

Agent: unify bootstrap truncation warning handling (#32769)

2026-03-03 16:28:38 -05:00

daemon

refactor: split slack/discord/session maintenance helpers

2026-03-02 23:07:20 +00:00

discord

feat(discord): add allowBots mention gating

2026-03-03 12:47:25 -06:00

docs

…

gateway

fix(gateway): include disk-scanned agent IDs in listConfiguredAgentIds (#32831)

2026-03-03 21:19:18 +00:00

hooks

refactor(hooks): dedupe install parameter wiring

2026-03-03 01:06:00 +00:00

i18n

fix(ci): resolve i18n typing and generated-policy drift

2026-03-02 04:29:18 +00:00

imessage

refactor: unify inbound debounce policy and split gateway/models helpers

2026-03-03 00:54:33 +00:00

infra

fix: harden Discord channel resolution (#33142) (thanks @thewilloftheshadow) (#33142)

2026-03-03 09:31:26 -06:00

line

security(line): synthesize strict LINE auth boundary hardening

2026-03-03 00:21:15 -06:00

link-understanding

…

logging

fix(logging ): use local timezone for console log timestamps (#25970)

2026-03-04 00:31:41 +03:00

markdown

refactor: dedupe gateway config and infra flows

2026-03-03 00:15:14 +00:00

media

security: add X-Content-Type-Options nosniff header to media route (#30356)

2026-03-03 13:35:46 -08:00

media-understanding

security(line): synthesize strict LINE auth boundary hardening

2026-03-03 00:21:15 -06:00

memory

bug: Workaround for QMD upstream bug (#27028)

2026-03-03 01:48:43 -05:00

node-host

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

pairing

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

plugin-sdk

feat(mattermost): add native slash command support (refresh) (#32467)

2026-03-03 12:39:18 +05:30

plugins

fix(security): strip partial API token from status labels (#33262)

2026-03-03 15:11:49 -08:00

process

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

providers

refactor: dedupe agent and browser cli helpers

2026-03-03 00:15:00 +00:00

routing

fix(heartbeat): scope exec wake dispatch to session key (#32724)

2026-03-03 14:47:40 +03:00

scripts

test(ci): add changed-scope shell-injection regression

2026-03-03 03:34:51 +00:00

secrets

docs: fix secretref marker rendering in credential surface

2026-03-03 15:08:41 -06:00

security

Security audit: suggest valid gateway.nodes.denyCommands entries (#29713)

2026-03-03 15:47:57 -08:00

sessions

fix: add runtime.events regression tests (#16044) (thanks @scifantastic)

2026-03-03 01:37:56 +00:00

shared

refactor(nodes): dedupe camera payload and node resolve helpers

2026-03-02 23:32:41 +00:00

signal

refactor: unify inbound debounce policy and split gateway/models helpers

2026-03-03 00:54:33 +00:00

slack

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

telegram

fix: stabilize Telegram draft boundaries and suppress NO_REPLY lead leaks (#33169)

2026-03-03 22:49:33 +05:30

terminal

CLI: dedupe config validate errors and expose allowed values

2026-03-02 20:05:12 -05:00

test-helpers

…

test-utils

refactor(test): extract cron issue-regression harness and frozen-time helper

2026-03-03 01:44:21 +00:00

tts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

tui

docs: tighten subscription guidance and update MiniMax M2.5 refs

2026-03-03 00:02:37 +00:00

types

…

utils

docs: tighten subscription guidance and update MiniMax M2.5 refs

2026-03-03 00:02:37 +00:00

web

test(e2e): isolate module mocks across harnesses

2026-03-03 05:52:14 +00:00

whatsapp

refactor: dedupe channel outbound and monitor tests

2026-03-03 00:15:15 +00:00

wizard

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

feat(docker): add opt-in sandbox support for Docker deployments (#29974)

2026-03-01 23:06:10 -08:00

dockerfile.test.ts

fix(docker): correct awk quoting in Docker GPG fingerprint check (#32153)

2026-03-03 02:32:46 +00:00

entry.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

Gateway: fix stale self version in status output (#32655)

2026-03-03 02:41:52 -05:00

version.ts

Gateway: fix stale self version in status output (#32655)

2026-03-03 02:41:52 -05:00